start to build permission related server methods